Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51181
Total
4084
Critical
15175
High
14817
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-66437 | MEDIUM | 4.9 | Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions. | Jul 27, 2026 |
| CVE-2026-66434 | MEDIUM | 6.5 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions. | Jul 27, 2026 |
| CVE-2026-66433 | MEDIUM | 6.5 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. | Jul 27, 2026 |
| CVE-2026-66428 | MEDIUM | 4.3 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions. | Jul 27, 2026 |
| CVE-2026-66427 | HIGH | 7.6 | Administrator SQL Injection in WP Google Review Slider <= 18.4 versions. | Jul 27, 2026 |
| CVE-2026-66050 | HIGH | 7.5 | NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write … | Jul 27, 2026 |
| CVE-2026-65568 | MEDIUM | 5.0 | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. | Jul 27, 2026 |
| CVE-2026-65567 | MEDIUM | 5.3 | Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions. | Jul 27, 2026 |
| CVE-2026-65564 | MEDIUM | 5.3 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. | Jul 27, 2026 |
| CVE-2026-65563 | MEDIUM | 5.9 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions. | Jul 27, 2026 |
| CVE-2026-65562 | MEDIUM | 6.5 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. | Jul 27, 2026 |
| CVE-2026-65561 | MEDIUM | 6.5 | Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions. | Jul 27, 2026 |
| CVE-2026-65558 | MEDIUM | 5.4 | Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions. | Jul 27, 2026 |
| CVE-2026-65557 | MEDIUM | 5.9 | Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. | Jul 27, 2026 |
| CVE-2026-65436 | MEDIUM | 6.8 | Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions. | Jul 27, 2026 |
| CVE-2026-65435 | MEDIUM | 6.5 | Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions. | Jul 27, 2026 |
| CVE-2026-65434 | MEDIUM | 6.5 | Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. | Jul 27, 2026 |
| CVE-2026-65433 | MEDIUM | 6.5 | Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. | Jul 27, 2026 |
| CVE-2026-59560 | MEDIUM | 6.5 | Subscriber Broken Access Control in FundEngine <= 1.7.8 versions. | Jul 27, 2026 |
| CVE-2026-59559 | MEDIUM | 6.5 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. | Jul 27, 2026 |
| CVE-2026-59558 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. | Jul 27, 2026 |
| CVE-2026-59557 | MEDIUM | 6.5 | Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions. | Jul 27, 2026 |
| CVE-2026-59556 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions. | Jul 27, 2026 |
| CVE-2026-59553 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. | Jul 27, 2026 |
| CVE-2026-59552 | HIGH | 7.2 | Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions. | Jul 27, 2026 |